Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2016-2554

Опубликовано: 16 мая 2016
Источник: ubuntu
Приоритет: medium
CVSS2: 10
CVSS3: 9.8

Описание

Stack-based buffer overflow in ext/phar/tar.c in PHP before 5.5.32, 5.6.x before 5.6.18, and 7.x before 7.0.3 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted TAR archive.

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

not-affected

5.5.9+dfsg-1ubuntu4.16
precise

released

5.3.10-1ubuntu3.22
trusty

released

5.5.9+dfsg-1ubuntu4.16
trusty/esm

not-affected

5.5.9+dfsg-1ubuntu4.16
upstream

released

5.6.18+dfsg-1
vivid/stable-phone-overlay

DNE

vivid/ubuntu-core

DNE

wily

released

5.6.11+dfsg-1ubuntu3.2

Показывать по

РелизСтатусПримечание
devel

not-affected

7.0.3-3
esm-infra-legacy/trusty

DNE

precise

DNE

trusty

DNE

trusty/esm

DNE

upstream

released

7.0.3-1
vivid/stable-phone-overlay

DNE

vivid/ubuntu-core

DNE

wily

DNE

Показывать по

10 Critical

CVSS2

9.8 Critical

CVSS3

Связанные уязвимости

redhat
больше 9 лет назад

Stack-based buffer overflow in ext/phar/tar.c in PHP before 5.5.32, 5.6.x before 5.6.18, and 7.x before 7.0.3 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted TAR archive.

CVSS3: 9.8
nvd
около 9 лет назад

Stack-based buffer overflow in ext/phar/tar.c in PHP before 5.5.32, 5.6.x before 5.6.18, and 7.x before 7.0.3 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted TAR archive.

CVSS3: 9.8
debian
около 9 лет назад

Stack-based buffer overflow in ext/phar/tar.c in PHP before 5.5.32, 5. ...

CVSS3: 9.8
github
около 3 лет назад

Stack-based buffer overflow in ext/phar/tar.c in PHP before 5.5.32, 5.6.x before 5.6.18, and 7.x before 7.0.3 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted TAR archive.

CVSS3: 9.8
fstec
около 9 лет назад

Уязвимость компонента ext/phar/tar.c интерпретатора языка программирования PHP, позволяющая нарушителю вызвать отказ в обслуживании или, возможно, оказать другое воздействие

10 Critical

CVSS2

9.8 Critical

CVSS3